CVE-2021-43498

HIGH 7.5CVE-2021-43498 · Published 08/04/2022 · updated 17/06/2026

In short

CVE-2021-43498 is a HIGH (CVSS 7.5) vulnerability affecting atutor (atutor).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
atutor atutor	`= 2.2.4`	No fix yet

Description

An Access Control vulnerability exists in ATutor 2.2.4 in password_reminder.php when the g, id, h, form_password_hidden, and form_change HTTP POST parameters are set.

References

atutor/ATutor · Exploit
packetstormsecurity.com/files/157563/ATutor-LMS-2.2.4-Weak-Password-Reset-Hash.html · Exploit

More vulnerabilities in atutor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

atutor

= 2.2.4

No fix yet

More vulnerabilities in atutor

See all →